
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: +777wNJ+2VKoi/pnglciBOA/gZTege2rdzlfge+t2OA=
Subject key identifier: 1E:1F:43:C8:9C:0D:6B:F4:BE:8C:6F:A3:66:76:F8:48:68:E9:64:F3
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 01A0CAEB6FB55BC185FB83BBC3E8C7198F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0877
Signing time: Tue 22 Sep 2026 21:00:22 +0000
Manifest this update: Tue 22 Sep 2026 21:00:22 +0000
Manifest next update: Wed 23 Sep 2026 21:00:22 +0000
Files and hashes: 1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: RjXvAI98kbodHkm+Kt1geLeuQESVvCrQh8QqPfsvQNo=)
2: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
3: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
4: nGgWCHlP5Rfk7nEXR5r0SwPGVhg.roa (hash: ub89EExosLdu9SpuUWFdEh7qASm/VbEptc/K/f13V3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:6f:b5:5b:c1:85:fb:83:bb:c3:e8:c7:19:8f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Sep 22 21:00:22 2026 GMT
Not After : Sep 23 21:00:22 2026 GMT
Subject: CN=1e1f43c89c0d6bf4be8c6fa36676f84868e964f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:41:34:75:b1:02:9a:de:e5:91:ea:83:c2:
de:79:3f:54:ae:c6:35:1f:cb:69:da:03:23:a9:ab:
dd:b6:8f:b5:2e:63:a1:ed:fc:c6:56:57:df:51:95:
f4:ce:0e:a5:80:dd:4c:d5:56:71:ac:8b:a5:43:18:
dc:1b:8f:db:25:69:62:51:5f:ac:3d:24:0f:41:bb:
72:a9:63:03:23:bc:31:aa:6c:0f:07:0d:8f:06:94:
57:d0:41:55:38:78:82:85:03:6b:df:38:26:4f:54:
37:1f:a8:ac:2c:dc:cc:aa:14:1e:90:09:c9:d5:7d:
62:f1:37:42:d4:65:db:21:51:ae:1a:c2:7f:90:85:
49:d9:10:91:27:36:82:4e:ff:4e:ec:a3:4b:6e:6b:
1d:f7:fc:46:84:de:77:5a:34:56:f2:2b:20:65:6e:
95:d4:86:3d:6e:35:c0:94:e1:e8:1d:c3:fb:0d:3b:
df:b4:0d:b1:92:a0:95:69:c3:9d:e6:71:68:66:53:
51:55:0e:ae:6b:e9:91:c9:23:56:68:f5:bf:ae:c9:
5b:5f:42:76:e4:4c:16:f1:d3:6a:49:60:6e:a2:a2:
c4:b2:e1:9e:2b:46:d1:54:53:cc:7c:ab:7d:44:5f:
2f:54:12:ae:cd:5a:ea:ae:09:61:ba:38:1b:c5:6c:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1F:43:C8:9C:0D:6B:F4:BE:8C:6F:A3:66:76:F8:48:68:E9:64:F3
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ed:03:43:6d:f9:87:e1:94:ed:3e:16:82:07:80:ff:2f:69:
95:08:b9:dc:93:ba:f0:9d:18:36:54:c9:07:ff:ca:35:fe:74:
24:fd:cd:73:b6:22:70:1d:86:f7:37:88:3f:42:e1:5d:16:6d:
0a:15:71:37:6f:b0:ae:02:1e:dd:a5:51:18:b9:a9:7b:c6:63:
3a:11:2f:01:f5:f1:5a:a1:b5:5d:8f:8d:69:c4:cb:3d:1f:3e:
2d:7b:a2:58:a3:64:36:20:6e:f5:22:27:3b:76:8b:ab:7f:3e:
c6:92:ec:b6:b9:0c:e7:b3:9e:03:4a:ef:bc:0f:fe:8e:7a:2e:
4b:26:48:19:d9:24:5f:5d:ef:24:9a:c9:53:be:05:68:7f:c3:
4a:4b:ad:69:41:71:4f:6c:06:3e:63:e6:7d:f3:03:00:9d:4c:
88:32:6f:3e:a3:6d:9e:57:c6:d7:c6:13:c6:c1:25:36:d1:5e:
a4:c6:db:d2:a5:bd:24:8a:af:7d:98:58:a9:dd:94:44:ca:16:
32:bc:38:16:e2:58:43:b6:1a:74:58:f1:1d:75:33:2c:f4:28:
8a:3c:c2:80:ce:1d:89:cd:ec:1c:1c:42:a2:fb:61:b7:b2:f4:
68:ab:63:e3:26:48:69:76:72:57:98:5c:4f:ea:3d:eb:a2:16:
dd:4c:21:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK62+1W8GF+4O7w+jHGY8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzhiZjY4YjY2NzVlMmE1YTNhNzkyMmY2NDc3ZDJhZmIz
NTdmYWMwHhcNMjYwOTIyMjEwMDIyWhcNMjYwOTIzMjEwMDIyWjAzMTEwLwYDVQQD
EygxZTFmNDNjODljMGQ2YmY0YmU4YzZmYTM2Njc2Zjg0ODY4ZTk2NGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vVBNHWxApre5ZHqg8LeeT9UrsY1
H8tp2gMjqavdto+1LmOh7fzGVlffUZX0zg6lgN1M1VZxrIulQxjcG4/bJWliUV+s
PSQPQbtyqWMDI7wxqmwPBw2PBpRX0EFVOHiChQNr3zgmT1Q3H6isLNzMqhQekAnJ
1X1i8TdC1GXbIVGuGsJ/kIVJ2RCRJzaCTv9O7KNLbmsd9/xGhN53WjRW8isgZW6V
1IY9bjXAlOHoHcP7DTvftA2xkqCVacOd5nFoZlNRVQ6ua+mRySNWaPW/rslbX0J2
5EwW8dNqSWBuoqLEsuGeK0bRVFPMfKt9RF8vVBKuzVrqrglhujgbxWwFzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4fQ8icDWv0voxvo2Z2+Eho6WTzMB8GA1UdIwQY
MBaAFEY4v2i2Z14qWjp5IvZHfSr7NX+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMt
ODcwNzNmNDM0YjAzLzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMtODcwNzNmNDM0YjAz
LzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOe0DQ235
h+GU7T4WggeA/y9plQi53JO68J0YNlTJB//KNf50JP3Nc7YicB2G9zeIP0LhXRZt
ChVxN2+wrgIe3aVRGLmpe8ZjOhEvAfXxWqG1XY+NacTLPR8+LXuiWKNkNiBu9SIn
O3aLq38+xpLstrkM57OeA0rvvA/+jnouSyZIGdkkX13vJJrJU74FaH/DSkutaUFx
T2wGPmPmffMDAJ1MiDJvPqNtnlfG18YTxsElNtFepMbb0qW9JIqvfZhYqd2URMoW
Mrw4FuJYQ7YadFjxHXUzLPQoijzCgM4dic3sHBxCovtht7L0aKtj4yZIaXZyV5hc
T+o966IW3UwhNA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:16:59 2026 by rpki-client